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IN THE CLAIMS 

1 . (currently amended) In a distributed network having a number of server 
computers and associated client devices, method of enforcing an ami-virus security 
policy, comprising: 

updating a virus monitor with cur rent rules and policies in an operating 
procedures and po licy file received from a controller; 

querying each of the client devices to determine if each of the client devices 
has an appropriate anti-virus software installed; 

identifying those queried client devices not having the appropriate anti-virus 
software as target client devices; 

locking all communications channels of the target client devices to a: an anti- 
virus software installation server; &f*4 

installing the appropriate anti-virus software to all target client devices; 
when a visitor client device is connected to the network, locking all 
communication channels of t he visitor client device to the anti-virus software 
installation server; 

scanning the visitor clie nt device using a virus scan server module; and 
granting a temporary credential fo r use bv the visitor client device when it is 
determined that the visitor client device is free of viruses and has other anti-virus 
software or has the appropri ate anti-virus software . 

2. (cancelled) 

3, (cancelled) 
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4. (currently amended) A method as recited in claim 13-, further 
comprising: 

posting a notification that the target client devices and the nowly connected- 
visitor client devices are prevented from communicating with other systems in the 
network until such time as the appropriate anti-virus software has been installed 
therein. 

5. (currently amended) A method as recited in claim further 
comprising: 

once the appropriate anti-virus software has been installed in the target 
client devices or the visitor nowly conn e ct e d client #e vio e s , 

relinquishing the lock on the communication channels for the newly 
connected client devices and the target client devices such that the target client 
devices and the visitor ae wly conn e cted client de vic e s can communicate with the 
other devices of network. 

6. (cancelled) 

7. (cancelled) 

8. (currently amended) A method as recited in claim 5 7-, further 
comprising: 

periodically determining validity of the credential ; and 
granting a new credenti al only if the visitor client device has not been 
infected by a computer virus . 

3 
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9. (original) A method as recited in claim 8, further comprising: 
invalidating the credential when it is determined to not be valid. 

10. (currently amended) A method as recited in claim wherein the 
credential is not valid after a period of time as determined by the granting. 

i 
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II. (currently amended) In a distributed network having a number of server 
computers and associated client devices, computer program product for enforcing 
an anti-virus security policy, comprising: 

computer code for updating a virus monitor with current rules and policies in 
an opera ting procedures and policy file received from a controller; 

computer code for querying each of the client devices to determine if each of 
the client devices has an appropriate anti-virus software installed; 

computer code for identifying those queried client devices not having the 
appropriate anti-virus software as target client devices; 

computer code fore locking all communications channels of the target client 
devices to a- an anti-virus software installation server; a«4 

computer code for installing the appropriate anti-virus software to all target 
client devices; 

when a visitor client device is connected to the network* computer code for 
locking al l communication chan nels of the visitor client device to the anti-virus 
software installation server; 

computer code for scanning the visitor client device using a virus scan 
server module: and 

computer code for granting a tempora ry credential for use by the visitor 
client device when it is determined that the visitor client device is free of viruses 
and has other anti-virus softwar e or has the appropriate anti-virus software . 

12. (cancelled) 

13. (cancelled) 

5 
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14. (currently amended) Computer program product as recited in claim U. 
12, further comprising: 

computer code for posting a notification that the target client devices and the 
n e wly connects ykUsrclient devices are prevented from communicating with 
other systems in the network until such time as the appropriate anti-virus software 
has been installed therein. 

15. (currently amended) Computer program product as recited in claim ii 
a3r, further comprising: 

once the appropriate anti-virus software has been installed in the target 
client devices or the visitor newly oonncoto4 client devices, 

computer code for relinquishing the lock on the communication channels for 
the newly connected client devices and the target client devices such that the target 
client devices and the visitor nowly oonnoot e d client device s can communicate with 
the other devices of network. 

16. (cancelled) 

17. (cancelled) 

18. (currently amended) Computer program product as recited in claim Y5 
further comprising: 

computer code for periodically determining validity of the credential Land 
computer code for granting a new cre d ential only if the visitor client device 
has not b een infected by a computer virus . 

6 
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19. (original) Computer program product as recited in claim 18, further 
comprising; 

invalidating the credential when it is determined to not be valid. 

20. (currently amended) Computer program product as recited in 
claim 18 43-, wherein the credential not valid after a period of time as determined 
by the granting. 

21. (new) A method as recited in claim I furth er comprising determining 
whether a transmission protocol to comm u nicate data in the network utiligfts 
encryption and not locking all communication channels if encryption is used 



7 
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